‹ BackHN Continuity

Thread

An agent used DNS to reach an external chatbot

198 points · 189 comments · apsec112

  1. itintheory · · focus · HN ↗
    What DNS service did the agent discover that allowed it to execute arbitrary llm queries? And how?
    1. oefrha · · focus · HN ↗
      Found one <a href="https:&#x2F;&#x2F;duyet.github.io&#x2F;llm-over-dns&#x2F;" rel="nofollow">https:&#x2F;&#x2F;duyet.github.io&#x2F;llm-over-dns&#x2F; and far from the only one since “X over DNS” is a deeply unoriginal idea <a href="https:&#x2F;&#x2F;hn.algolia.com&#x2F;?dateRange=all&amp;page=0&amp;prefix=true&amp;query=%22over%20dns%22&amp;sort=byPopularity&amp;type=story" rel="nofollow">https:&#x2F;&#x2F;hn.algolia.com&#x2F;?dateRange=all&amp;page=0&amp;prefix=true&amp;que... and trivial to code up.
      1. itintheory · · focus · HN ↗
        Right, but your have to run this server somewhere, which the agent couldn&#x27;t do.
        1. oefrha · · focus · HN ↗
          Yes, the linked project does say they have a demo server at llm-over-dns.duyet.net. (I didn&#x27;t bother to check whether it&#x27;s still working.)

          Edit: This particular demo server doesn&#x27;t work. There&#x27;s another LLM over DNS post from a year ago <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=44813298">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=44813298 where the server seems to answer some queries but not others.

          Edit 2: Actually the server in <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=44813298">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=44813298 does work with queries like &quot;what is the capital of france&quot;, I was querying with special characters like &quot;what&#x27;s&quot; or &quot;1+1&quot;. So yes there are people opening hosting these on the Internet.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.